7.5
CVSSv2

CVE-2002-1396

Published: 17/01/2003 Updated: 03/05/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and prior to 4.3.0 may allow malicious users to cause a denial of service or execute arbitrary code.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 4.1.2

php php 4.2.2

php php 4.2.3

php php 4.2.0

php php 4.2.1

Vendor Advisories

Debian Bug report logs - #365311 CVE-2006-1990/CVE-2006-1991: Security vulnerabilities in php Package: php4; Maintainer for php4 is (unknown); Reported by: Stefan Fritsch <sf@sfritschde> Date: Sat, 29 Apr 2006 06:48:02 UTC Severity: grave Tags: security Found in version php4/4:442-1 Fixed in version php4/4:442-11 D ...
Debian Bug report logs - #365312 CVE-2006-1990/CVE-2006-1991: Security vulnerabilities in php Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5 is src:php5 (PTS, buildd, popcon) Reported by: Stefan Fritsch <sf@sfritschde> Date: Sat, 29 Apr 2006 06:4 ...